how many more of these goddamn breaches will it take before we decide to pass some radical legislation? e.g. ban the stockpiling of customer data without explicit consent, or mandate that customer data be deleted after [x] years of inactivity. idk what the specific solution should be but these corporations have repeatedly proven themselves unworthy custodians of personal information, and it's past time for them to face some consequences.
https://www.cbc.ca/news/business/giant-tiger-customer-data-breach-1.7154572